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basis thereby providing enhanced secunty in data communications. A direct connection between the communicarion device and the host 
computer s video subsystem provides accelerated video access for applets executing on the device. 
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INTELLIGENT COMMUNICA.TION DEVICE 

Benefir of United States Provisional 
Application No. 60/012,447, filed February 28, 1996, is 
5 claimed herefor." 

Background of thfi Tnvgntion 

Modems provide a means for remote computers 
to communicate over the Public Switched Telephone 
Network ("PSTN"), and have been in use for several 

10 decades. While data transmission rates using analog 
modems have risen considerably over the past decades, 
from 120 bits-per-second (bps) to 28,800 bps, command 
and control technology has remained relatively static. 

The de facto industry standard modem command 

IS set is the "Hayes AT-command set" created in the late 
1970' s. The AT-commands consist of an attention . 
sequence, usually the characters 'AT', f ollowed-*'by^ a 
sequence of commands and terminated by a carriage 
return, wherein command sequences are comprised of one 

20 to three characters possibly with a data value. This 
procedural "one command at a time" technology does not 
provide much flexibility or adaptability in controlling 
operation of a modem. Nor does it provide for 
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significant autonomous, mteiiigent, processing within 

the modem itself. 

Some previously known modems provide 
"alterable" read only memory, such as Flash-ROM or 
5 EEPROM, so that the control and processing software m 
the modem may be updated as new code revisions are 
released. However, this is primarily intended as a 
means to fix bugs in modem software and to provide 
minor upgrades in modem features and capabilities. In 
10 addition, the software stored, for example, in the 
EEPROM, is intricately tied to the specific hardware 
used in the modem and is therefore highly machine 
dependent. Thus, software updates for one modem are 
unlikely to work with a different modem. 

Modems are used to connect a user's computer 
to a remote computer. Recently, the Internet has 
become an important medium of communication, and the 
world wide web (web) has become an important source of 
services and information. Many users use a modem and 
20 dial-up lines to access the Internet from home or 

office. Recent developments m web technologies enable 
small programs, or applets, to be embedded in web 
pages. When a user views a web page, the applet is 
downloaded, along with other page contents, and then 
executed on the user's computer. Thus, in addition to 
interpreting and rendering the web page, the user's 
computer must also interpret and execute the applet, 
increasing the computational burden on the user's 
computer. The fact that many applets are highly 
30 graphical in nature only increases this burden. 

An additional concern regarding computer 
communications is the lack of automatic security 



25 



wo 97/34426 



PCT/US97/02894 ' 



features. While software and hardware currently exists 
to encrypt data, much of it is expensive to obtain, or 
difficult to use, and is therefore restricted to use by 
large institutions. As a result only a small amount of 
5 inter-computer communications are encrypted. 

In view of the above mentioned difficulties 
in the art, it would be desirable to provide a method 
of controlling modem hardware in a flexible, 
programmable manner that is largely independent of 
10 specific modem hardware and is therefore portable from 
one modem to another. 

It would also be desirable to provide a means 
for assisting a host computer in interpreting a data 
stream and in executing programs or applets that may be 
15 embedded in the data stream. 

It would also be desirable to provide a means 
of automatically providing for relatively secure inter- 
computer data communications. 

Summarv of th^ Invention 

20 The objects of the present invention are met 

by providing a modem in which new commands comprising 
small programs or "applets" may be loaded into the 
modem either from a host or a remote computer. The 
applets may then be invoked by the host or remdtd? 

25 computers and executed by a processor within the modem 
itsel-f. Because the applets are written in a high 
level language and encoded in a portable way, the 
applets may run on a wide variety of modem hardware 
configurations. In a preferred embodiment, the modem 

30 includes hardware or software access to a frame buffer 
of the host computer to increase the rate that applets 
can update screen images. 
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a^if^f Degr-riprSnn n - tho Drawings 

The above and other objects and advantages • of 
the present invention will be apparent upon 
consideration of the following detailed description, 
5 taken in conjunction with the accompanying drawings, m 
which like reference characters refer to like parts 
throughout, and in which: 

FIG. 1 is an illustrative block diagram of a 
software commanded intelligent modem in accordance with 
10 the principles of the present invention; and 

FIG. 2 is an exemplary flow diagram of the 
process of downloading an applet from a remote modem. 

FIG. 3 is an illustrative block diagram of an 
exemplary host computer and modem, including a 
15 dedicated interface between the modem and a frame 
buffer of the host computer. 

T :ir r i V-'--1 r^o.r-rinr^on of rhf Invpnr .i Qn 

Referring to FIG. 1, software-controlled 
modem 10, constructed in accordance with the principles 
20 of the oresent invention is described. Modem 10 is 

shown coupled, via jack 26, to telephone line 14, which 
may be either an analog or digital phone line, via data 
port 16, and to host computer 12. which may be anjj 
general purpose computer such as an IBM AT-PC or Apple 
25 MACINTOSH type computer. Alternatively, host 10 may be 
a personal digital assistant (PDA) , electrorvic 
organizer, pager, cellular telephone, or other device 
capable of performing user input and output functions. 

Data port 16 provides a means of exchanging 
30 data between modem 10 and host computer 12 and may be 
any conventional interface such as a RS-232 {EI.A-232) 
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serial interface or a Enhanced Parallel Port (EP?) 
interface. Alternatively, modem 10 may be an add-in 
card for instailauion in an expansion slot of computer 
10, wherein data pore 16 may comprise an expansion bus 
5 interface. Similarly/ jack 26 may be any jack 

compatible with connecting to telephone, line 14, such 
as a standard RJ-45 type modular jack. Alternatively, 
jack 26 may be a generic jack or connector, and a 
special purpose adapter cable may couple the jack to 

10 telephone line 14. 

Modem 10 also includes controller 18, RAM 20, 
ROM 22, and modem circuitry 24. Controller 18 controls 
the operation of modem circuitry 24 in accordance with 
program instructions stored in RAM 20 and ROM 22. 

15 Controller 18 may be any suitably powerful general 

purpose microprocessor, such as a 80386 class processor 
manufactured by Intel, Santa Clara, California. 
Alternatively controller may be a digital signal 
processor (DSP) such as a member of the 53600 DSP 

20 family manufactured by Motorola, Schaumburg, Illinois. 

RAM 20 provides storage for applets and a 
temporary scratchpad area for processor 18. RAM 20 may 
also include battery backed RAM for long term storage 
of applets and configuration parameters used by the 

25 modem software. ROM 22, which may include EEPROM^^or 
other type of alterable read only memory includes 
programming for controlling overall operation of modem 
10, and for executing applets stored in RAM 20. 
Preferably, ROM 22 also includes programming for 

30 supporting standard modem command sets, such as the 
"Hayes AT" .command set. 
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In a preferred embodiment of "he present 
invention, ROM 22 includes program code implementing a 
virtual machine for execution of programs written m 
the Java programming language. The Java language is an 
general purpose, object-oriented computer language 
developed by Sun Microsystems specifically for 
networking applications, and' is described in 
^^r.rJ^:.^m^r^a Java! , Tim Ritchey, New Riders 
Publishing, Indianapolis, Indiana, 1995, which is 
incorporated herein in its entirety by this reference. 

Applets written in the Java language are 
compiled into a machine independent, byte-coded 
"machine language" that is executed on the "Java 
virtual machine." Currently, Java virtual machines are 
15 software based, although a few processors have been 
announced that execute Java byte-codes directly. 

Applets may be downloaded into modem 10 from 
host computer 12 by the host sending a "load applet- 
command to modem 10 followed by the compiled applet 
code itself. To provide maximum modem compatibility, 
the "load applet" command is, preferably, an extension 
of and compatible with existing modem command sets, 
such as the Hayes-AT command set. The downloaded 
applet code is stored in RAM 20, and a verif ica,tion 
routine stored in ROM 22 is executed by processbr; 18 to 
verify and validate the downloaded code. This step 
assures that the code complies with the Java language 
definition and helps maintain system integrity and 
security. 

30 Alternatively, modem 10 may load an applet 

from a remote computer or modem via telephone line 14. 
For exaiaple, it may be desired to connect host computer 
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10 to a computer at a bank, or other financial 
institution, for the purpose of conducting financial 
. transactions. Using presently available technologies, 
data transmitted between host computer 10 and the 
5 bank's computer is transmitted in the clear (i.e. 
unencrypted) subjecting the data to theft or 
compromise . 

Alternatively, custom software that encrypts 
the data being transferred may be executed on host 

10 computer 10 and the bank's computer. While this may 
minimize the chance of transferred data being 
compromised, the custom software typically only works 
with a specific remote site. Thus, software that works 
with one bank's computer may not work with another 

15 bank's computer. The user must then keep software for 
each remote computer that requires a secure data link. 
In addition, whenever the bank's software is changed or 
upgraded, the user must go through the process of 
installing new user software on host computer 10. 

20 In accordance with the principles of the 

present invention, modem 10 may negotiate with a remote 
modem for the transfer of an applet, which may be an 
applet for data encryption. The negotiations may take 
place when a communications link is first established 

25 between modem 10 and the remote modem, or may bfe 

delayed until secure communications are specifically 
requested. Following the transfer negotiations, the 
applet is received from- the remote modem and stored 
into RAM 22. The applet is then verified as described 

30 above. The verified code may then be executed as 
needed by processor 18. 
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FIG. 2 shows an illustrative negotiation and 
transfer sequence for downloading an encryption 
routine. At step 30, modem 10 send a message tc the 
remote modem inquiring if the remote modem is Java 
enabled. The remote modem may respond negatively 
indicating it is unable to receive applets because, for 
example, the remote modem is' an old modem without the 
capability of downloading applets, or the download 
feature may be disabled. Alternatively, the request at 
step 30 may "timeout" indicating that the remote modem 
does not recognize the negotiation sequence- In any 
case, a negative or missing response to the Java 
request causes the sequence to proceed to step 32, 
wherein alternatives to using Java applets are 
considered. For example, applets written in another 
programming language may be used. Alternatively, a 
user may be given an opportunity to fix the problem 
(e.g. reenable applet downloading), to continue without 
downloading the applet, or to abort the process. If 
there are no alternatives to using Java applets the 
sequence aborts at step 34, otherwise, the alternative 
is used (step 36) and processing continues at step 52. 

However, if the remote modem responds 
affirmatively to the Java request, then modem IQ ^ 
25 inquires at step 38 if the remote modem has a specific 
applet, for example a particular encryption applet. I 
the remote modem responds "no" then modem 10 proceeds 
to steo 4 4 and transmits the applet to the remote 
modem ' If the remote modem has t.he requested applet, 
30 it responds by sending a "yes" along with the version 
number of the applet. 
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At steps 40 ana 42, modem 10 determines if 
the applet cn the remote modem is the same version as 
the applet used by modem 10, and if not, which modem 
has the newer version. If the versions are the same, 
5 then the negotiation is completed and processing 

continues at step 52. However, if the remote modem has 
a newer version of the applet, then at step 48 modem 10 
downloads the newer applet from the remote modem, and 
verifies the applet at step 50. If the applet is 

10 verified then the sequence continues through step 52. 
Otherwise, modem 10 returns to step 43 and repeats the 
downloading process until verification is successful. 
Alternatively/ if modem 10 has a newer version of the 
applet, the sequence proceeds to step 44 wherein modem 

15 10 transmits the applet to the remote modem. The 

remote modem then notifies modem 10 of the results of 
verification. If verification was unsuccessful, then 
the applet is resent, otherwise, the sequence continues 
through step 52. 

20 The sequence shown in FIG. 2 presents a 

generic outline of a negotiation sequence between 
intelligent modems according to the present invention. 
Clearly, embellishments may be made to the negotiation 
sequence shown in FIG. 2. For example, the loop, 

25 comprising steps 44 and 46, for sending an app-let to 
the remote modem may include a test for limiting the 
number of attempts at sending the applet, thereby 
preventing modem 10 from getting stuck in the send 
loop. Or, for example, a test may be inserted between 

30 steps 4 0 and 42 to determine if both modems have a 

common version of the applet that the modems could use, 
even if it is not the latest version. This may save 
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the overhead involved in transmicring a newer applet 
when a slighrlv older version of the applet is 
sufficient, one skilled in the art will recognize 
other modifications and embellishirents which may be 
added to the negotiation sequence of FIG. 2. 

Loading an applet from a remote modem 
provides a facility for automatic data encryption 
services. For example, any time a connection is 
established between modem 10 and a similar remote 
modem, the use of a data encryption applet may be 
negotiated. If the modems already contain the same 
version of the encryption applet then data transiers 
n.ay begin. If, however, one of the modems lacks the 
encryption applet, or has an older, out-of-date 
version, the modems may negotiate to transfer the new 
version. Preferably, the newer version of the applet 
is cached or otherwise retained by modem 10 or host 12 
for later use. Alternatively, applets may be discaraed 
after use (i.e. after disconnecting). Thus, either the 
bank or the user may upgrade to a newer version of the 
security software without fear of incompatibility wi .h 

older access software. 

security may be further enhanced by using 
encryption applets that are session unicue. 
words each time modem communication lin. iS established 
a different encryption applet is used. In addition to 
on-line banlcing, simple, robust, and strong security 
measures are a necessary first step to a wide range ox 
on-line services and transactions. 

Additionally, applets may be used to scan 
incoming data for potentially hazardous programs, such 
as virus, worm, or Trolan horse programs. These types 
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of prograins have the potential to damage both hardware 
and software resources on host computer 12, By 
automatically scanning data transferred . through .Tiodem 
10, the modem may discard the offending transfer or may, 
5 alert the user to a potential rogue program. 

Similarly, _ an applet may provide filtering of 
"junk e-mail" or other unwanted data. For example, an 
applet may search for e-mail headers in data received 
via telephone line 14 and discard any e-mail messages 

10 from a particular individual or has a specified 
'subject:* line. Alternatively, an applet may 
prioritize incoming, messages based on a user specified 
criteria, arranging to deliver the most urgent message 
first. This may be particularly useful in a mobile, 

15 radio-based, inter-computer communication enviromnent . 

The use of applets to control modem 10 
provides for easy upgrades or updates of modem control 
software stored in the alterable portion of ROM 22. 
For example, if modem 10 connects to a remote modem 

20 having a different modem communications protocol, the 
two modems may negotiate to transfer an applet for the 
better protocol (i.e. newer, or faster, or more 
robust) . Thus, the modem having older software is 
updated to the latest version, 

2^ Special flags or data values within each 

applet may be used to indicate various information 
about the applet. A first flag may indicate that the 
applet is not transf errable and a modem should not 
transfer such an applet to another modem. Another flag 

30 may indicate that the applet should not be cached. For 
example, a ..session encryption applet should not be 
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cached because it will not be used again in a future 



10 



15 



20 



Alternatively, a data value may be used as a 
counter or expiration date for an applet. Each time 
the applet is used the counter is decremented or the 
date is checked against the expiration date. If the 
counter reaches zero or the expiration date is passed 
then the applet is not run, and may be removed from R^^ 
20 or ROM 22. This provides a means for a user to 
"test drive" an applet before purchase, while 
protecting the interests of the seller/developer of the 
apDlet. Through judicious use of the • transf errable • 
and the 'cacheable' flags, as well as the expiration 
counter, an applet author can ensure that an applet 
receives wide distribution, for trial use by potential 
customers. 

Referring now to FIG. 3, an alternative 
illustrative embodiment of the present invention is 
described. Host computer 12 includes CPU 60, frame 
buffer 62, display controller 64, and display 68. 
Modem 10 contains the same components as described 
above in connection with FIG. 1. In addition, modem 10 
also includes video interface 66 coupled to frame 
bu^^fer 62. Alternatively, video interface 66 may 
instead couple processor 18 to display controUlV ,^64 • 

In a preferred embodiment of the present 
invention video interface 66 comprises a standard 
xnte^face such as a VGA- feature connector or. the Zoomed 
Video oort described in the CardBus specification 
30 (Similar to PCMCIA). Alternatively, data port 16 and 
video interface 66 may comprise a conventional high 
speed data bus, such as VESA local bus or PCI bus, 



25 
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wherein high speed device drivers and DMA cr bus 
mastering techniques may be used to transfer video data 
between modem 10 and frame buffer 62. 

Video interface 65 provides processor 18 with 
5 accelerated access to frame buffer 62. Without video 
interface 66, graphi^cal data from applets executing on 
modem 10 need to be- transferred to fram.e buffer via CPU 
60, slowing display updates. However, with video 
interface 66, graphical applets executing on modem 10 

10 may access frame buffer 62 directly, thereby providing 
rapid screen updates* For example, modem 10 may 
execute a Java applet that creates a short animation 
sequence. Without video interface 66, the animation 
might appear slow and jerky due to the relatively low 

15 data rate available between processor 13 and frame 

buffer 62 via CPU 60. However, in accordance with the 
principles of the embodiment of FIG, 3 of the present 
invention, video interface 66 provides direct access 
from modem processor 18 to frame buffer 62. Thus, an 

20 animation may appear more quickly and smoothly, with 
fewer dropped fraunes. 

In addition, video interface 66 may provide 
improved response for live video, such as video 
conferencing, video phone, or whiteboard type 

25 applications. In these instances, modem processor 18 
may intercept an incoming video image, decode the 
image, and send it directly to the frame buffer, 
instead of transmitting, the data to the host CPU. 
Processor 18 may also capture a portion of an image 

30 from frame buffer 62 for transmission to a remote 
computer. 
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While the preferred embodiment of the present 
invention has been disclosed in terms of an 
intelligent, software based modem, other embodiments 
are contemplated. For example, analog modem circuitry 
24 may instead comprise circuitry implementing a 
digital line connectors, a packet radio transceiver, a 
local area network connector, or cable modem. 
Obviously, in each instance, telephone line 14 would 
instead be the corresponding transmission medium, e.g. 
coaxial cable for a cable modem. 

Similarly, software languages other than the 
Java may be used. The Java language is currently 
popular for use in networked devices and is therefore a 
good choice for the present invention. However, other 
languages and standards are emerging in the field of 
inter-computer communications which may used in the 
context of the present invention. 

one skilled in the art will appreciate that 
the present invention may be practiced by other than 
the described embodiments, which are presented for 
purposes of illustration and not of limitation. 



wo 97/34426 



PCm'S97/02894 



- 15 - 

1. A data comnunication device for 
transmitting and receiving ■ data between a host device 
and a remote device, the data communication device 
comprising: 

an interface adapted for coupling the data 
communication device to the host devices- 
modem circuitry adapted for communicating 
data with the remote device; 

a first memory for storing a command routine 
written in a general purpose programming language; and 

a processor coupled to the interface, the 
first memory, and the modem circuitry, the processor 
programmed to execute the command routine. 

2- The data communication device as defined 
in claim 1 wherein the command routine is encoded as a 
sequence of fixed-length codes, the fixed-length codes 
that are processor-independent, the processor being 
programmed to execute the command routine by 
interpreting the sequence of fixed-length codes. 

3. The data communication device as defined 
in claim 2 wherein the fixed-length codes comprise byte 
codes . 

4. The data, communication device as defined 
in claim 3 wherein the byte codes conform to a 
specification of the Java programming language. 
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5. The data communication device as definec 
in claim 1 wherein the modem circuitry comprises 
circuitry selected from a group consisting of a 
telephone modem, a cable modem, a digital line 
interface, a local area network interface, and a packet 

radio transceiver. . 

6. The data communication device as definea 
in claim 1 wherein the processor is programmed for 
receiving a command routine from the host device and 
storing the received command routine in the first 



memory . 



7. The data communication device as defined 
in claim 1 wherein the processor is programmed for 
receiving a command routine from a remote device via 
the modem circuitry and storing the received command 
routine in the first memory. 

8 The data communication device as defined 
in claim 1 further comprising a second memory coupled 
to the processor, the second memory being a non- 
volatile memory, the processor being further programmed 
to transfer a command routine from the first memory to 
a second memory. ^i,^ ^ 

9. A data communication device for 
transmitting and receiving data between a host device 
and a remote device, the data communication device 

comprising: 

an interface adapted to couple the data 

communication device to the host device for the 

transfer of data therebetween; 
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modem circuitry for communicating data with a 
remote device to receive a command routine; 

a first memory for storing the command 
routine; and 

a processor coupled to the interface, the 
modem circuitry, and the first memory, the processor 
being programmed to execute the command routine to 
control transmission and reception of data between the 
host device and the remote device. 

10. The data communication device as defined 
in claim 9 wherein the command routine is encoded in 
the form of fixed-length codes, the fixed length codes 
being processor-independent. 

11. The data communication device as defined 
in claim 10 wherein the fixed-length codes comprise 
byte-codes, wherein the byte-codes are compatible with 
a specification of the Java programming language. 

12. The data communication device as defined 
in claim 9 wherein the processor executes the command 
routine directly. 

13. The data communication device as defined 
in claim 9 further comprising a second memory, the 
second memory including programming for an interpreter 
of the byte-codes, the processor uses the interpreter 
to execute the command routine. 

14. The data communication device as defined 
in claim 9 wherein the command routine controls 
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transmission and reception of data between the host 
device and the remote device by providing a security 
function. 

15. The data communication device as defined 
in claim 14 wherein the security function provides 
encryption of the data transferred between the host 
device and the remote device. 

16. The data communication device as defined 
in claim 14 wherein the security function scans the 
data transferred between the host device and the remote 
device for computer viruses. 

17. A method of controlling a data 
coironunication device comprising an interface to a host 
device, a memory, modem circuitry coupled to a remote 
device, and a processor coupled to the interface, the 
memory, the modem circuitry and the processor, the 
method comprising steps of: 

receiving a command routine from the remote 

device via the modem circuitry; 

storing the received command routine m the 



memo r y ; and V •; ti. 

retrieving portions of the command rou.ti,ne 

from the memory and transferring the portions to the 

processor; and - 

executing the portions of the command rou.in 

to control the data transfer between the host device 
and the remote device. 



wo 97/34426 



PCTAJS97/02894 



-IS- 
IS. The method as defined in claim H 
further comprising steps of verifying that the command 
routine complies with a specification of a command 
language. 

19. The method as defined in claim 17 
wherein the step of executing portions of the command 
routine comprises a step of executing an interpreter to 
interpret the command routine . 

20. The method as defined in claim 17 where 
in the step of executing portions of the command 
routine comprises a step of executing the command 
routine to control encryption of data transferred 
between the host device and the remote device. 

21. The method as defined in claim 17 where 
in the step of executing portions of the command 
routine comprises a step of executing the command 
routine to scan data transferred between the host 
device and the remote device for the presence of 
computer viruses. 

22. A method of securely communicating data 
between first and second devices, the method comprising 
the steps of: 

establishing a non-secure communication link 
between the first device and the second devices- 
transmitting a data encryption routine from 
the first device to the second device; and 
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using the dara encryption routine to encrypt 
data communicated between the first device and the 
second device. 

23. The method as defined in claim 22 
wherein the step of transmitting the data encryption 
routine further comprises steps of: 

determining whether the second device stores 
the data encryption routine; and 

if the second device is determined to lack 
the encryption routine, transmitting the data 
encryption routine from the first device to the second 
device . 

24. The method as defined in claim 22 

further comprising steps of: 

determining a version of the data encryption 
routine stored in the second device responsive to a 
determination that the second device stores the data 

encryption routine; 

comparing the version of the data encryption 

routine stored in the second device to a current 

version; and 

if the data encryption routine stored J^'^^ 

second device is determined to not be the current T 

version, transmitting the current version from the 

first device to the second device. 

25. The method as defined in claim 22 
wherein the data encryption routine is encoded in the 
form of fixed-length codes, the fixed-length cooes 
being processor-independent, and the step of using tne 
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data encryption routine includes interpreting the 
fixed-length codes comprising the data encryption 
routine . 

26. The method as defined in claim 22 
wherein the second device discards the data encryption 
routine after communication vith the first device 
terminates . 

27. The method as defined in claim 22 
wherein the second device retains the data encryption 
routine after communication with the first device 
terminates . 

28. The data communication device as defined 
in claim 14 further comprising a video port for 
coupling the processor to a display subsystem of the 
host device for the transfer of images therebetween. 
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